Sansan
090e794460
Security - Serve character images through os.Root so names like ../ can't escape the characters folder - Sync start and /sync/reset are POST only (legacy and /api/v1) - /api/v1/token/cleanup requires a token, password compared in constant time, tokens no longer logged - Echo's rate limiter replaces the custom one; TRUSTED_PROXIES enables X-Forwarded-For for reverse proxies Crashes and races - Sync state lives in SyncService with atomics and a mutex instead of unsynchronised globals (fixes concurrent map writes during full sync) - Only one sync can run; /api/v1 sync and music routes are locked during sync like the legacy ones - No log.Fatal outside startup: errors become 4xx/5xx responses - Search uses an in-order character match instead of unescaped regexes - Empty queue / no songs return 404 instead of panicking or looping Behaviour - Sync result is computed once and stays the same between polls - Swagger and /openapi serve the embedded spec - Shutdown stops HTTP before closing the database - Expired tokens are deleted with a context that outlives the request - Files are served with Range support and correct content types; audio has no write deadline Performance - Migration 000006 adds soundtrack.fingerprint (names, sizes, mtimes) so unchanged folders are skipped without reading any files - Songs are reconciled per soundtrack with one query plus needed writes; renames keep play counts - Moved MUSIC_PATH updates soundtrack and song paths - .id cleanup only runs for changed soundtracks or a full sync - Classic random uses one SQL query; Gitea release lookups are cached with a timeout Structure - internal/config reads all environment variables once - sqlc emits a Querier interface; backend globals become services injected into handlers - One route registration shared by legacy and /api/v1 - Removed dead code (dbHelper.go, unused middleware, duplicate Gitea functions, embedded Swagger UI copy) and lib/pq - templ and swag pinned as go tools
82 lines
2.4 KiB
Go
82 lines
2.4 KiB
Go
package server
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"music-server/internal/backend"
|
|
|
|
"github.com/labstack/echo/v5"
|
|
)
|
|
|
|
type DownloadHandler struct {
|
|
releases *backend.ReleaseService
|
|
}
|
|
|
|
func NewDownloadHandler(releases *backend.ReleaseService) *DownloadHandler {
|
|
return &DownloadHandler{releases: releases}
|
|
}
|
|
|
|
// CheckLatest godoc
|
|
// @Summary Check for latest version
|
|
// @Description Returns the latest version of the client application
|
|
// @Tags download
|
|
// @Produce json
|
|
// @Success 200 {string} string
|
|
// @Failure 502 {string} string "upstream service unavailable"
|
|
// @Router /download [get]
|
|
func (d *DownloadHandler) CheckLatest(ctx *echo.Context) error {
|
|
latest, err := d.releases.LatestVersion(ctx.Request().Context())
|
|
if err != nil {
|
|
return songError(err)
|
|
}
|
|
return ctx.JSON(http.StatusOK, latest)
|
|
}
|
|
|
|
// ListAssetsOfLatest godoc
|
|
// @Summary List assets of latest version
|
|
// @Description Lists all assets available for the latest version
|
|
// @Tags download
|
|
// @Produce json
|
|
// @Success 200 {array} string
|
|
// @Failure 502 {string} string "upstream service unavailable"
|
|
// @Router /download/list [get]
|
|
func (d *DownloadHandler) ListAssetsOfLatest(ctx *echo.Context) error {
|
|
assets, err := d.releases.AssetNames(ctx.Request().Context())
|
|
if err != nil {
|
|
return songError(err)
|
|
}
|
|
return ctx.JSON(http.StatusOK, assets)
|
|
}
|
|
|
|
// DownloadLatestWindows godoc
|
|
// @Summary Download latest Windows version
|
|
// @Description Redirects to download the latest Windows version
|
|
// @Tags download
|
|
// @Success 302 {string} string
|
|
// @Failure 404 {string} string "not found"
|
|
// @Failure 502 {string} string "upstream service unavailable"
|
|
// @Router /download/windows [get]
|
|
func (d *DownloadHandler) DownloadLatestWindows(ctx *echo.Context) error {
|
|
return d.redirectToAsset(ctx, ".exe")
|
|
}
|
|
|
|
// DownloadLatestLinux godoc
|
|
// @Summary Download latest Linux version
|
|
// @Description Redirects to download the latest Linux version
|
|
// @Tags download
|
|
// @Success 302 {string} string
|
|
// @Failure 404 {string} string "not found"
|
|
// @Failure 502 {string} string "upstream service unavailable"
|
|
// @Router /download/linux [get]
|
|
func (d *DownloadHandler) DownloadLatestLinux(ctx *echo.Context) error {
|
|
return d.redirectToAsset(ctx, ".x86_64")
|
|
}
|
|
|
|
func (d *DownloadHandler) redirectToAsset(ctx *echo.Context, suffix string) error {
|
|
url, err := d.releases.AssetURL(ctx.Request().Context(), suffix)
|
|
if err != nil {
|
|
return songError(err)
|
|
}
|
|
return ctx.Redirect(http.StatusFound, url)
|
|
}
|